proposal-megaeth[.]info

Analysis indicates that the domain proposal-megaeth.info was registered through Spaceship, Inc. on August 05 2026 and is currently active. The authoritative nameservers are camilo.ns.cloudflare.com and kinsley.ns.cloudflare.com, pointing the domain to the Cloudflare edge address 104.21.48.158. The domain appears on three external blocklists and is explicitly blocked by PhishDestroy, MetaMask, and SEAL, confirming that security vendors have identified it as a malicious resource.

A VirusTotal scan involving 91 antivirus and URL‑reputation engines reported no detections at the time of analysis; however, the absence of detections does not constitute evidence of benign behavior and should not be interpreted as a safety guarantee. No additional intelligence such as SSL certificate details, HTTP response codes, Safe Browsing verdicts, OTX references, or page‑title metadata is presently available, leaving the content and exact phishing vector unverified. Given the high‑risk classification, defenders should continue to enforce URL filtering for proposal-megaeth.info, monitor DNS queries for the associated Cloudflare IP, and consider adding the domain to internal blocklists.

Organizations employing email security gateways should prioritize the domain for real‑time URL blocking, and threat‑intel teams are advised to enrich the indicator with any future sandbox analyses or victim‑submitted artifacts. Because the domain is hosted on Cloudflare, rapid takedown requests may be limited; therefore, defenders should also consider rate‑limiting outbound connections to the IP address while monitoring for legitimate Cloudflare traffic.